Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/066b55c3-7fca-3fa3-8baf-ce4b7c9d788a.roa
File:                     066b55c3-7fca-3fa3-8baf-ce4b7c9d788a.roa (raw, json)
Hash identifier:          HVuejsGrnzGD/Z6g+Utjnk95cm4hf5jj47K1EVggTR8=
Subject key identifier:   35:5D:5C:24:BC:E6:1D:73:F7:F0:0A:B8:23:18:8F:69:D0:7D:47:EF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1F759CF5236F7A37D04ADF60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/066b55c3-7fca-3fa3-8baf-ce4b7c9d788a.roa
Signing time:             Tue 10 Mar 2026 14:28:37 +0000
ROA not before:           Tue 10 Mar 2026 14:28:37 +0000
ROA not after:            Mon 08 Jun 2026 14:28:37 +0000
asID:                     396540
IP address blocks:        2001:503:d414::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:75:9c:f5:23:6f:7a:37:d0:4a:df:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 10 14:28:37 2026 GMT
            Not After : Jun  8 14:28:37 2026 GMT
        Subject: CN=f861ae9a-79ef-41c4-8d8a-4444a98c05ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:62:8f:ed:59:2a:7a:95:09:88:4c:65:4a:1c:
                    04:14:55:4f:36:bb:cc:92:1d:b7:24:30:cc:73:2e:
                    b4:af:83:dd:a8:73:16:ea:ea:61:92:eb:81:10:34:
                    8c:4c:e0:50:36:5e:dc:36:e1:3e:d4:0a:b6:b0:e3:
                    70:cc:a3:1b:cc:7c:45:5b:f9:6a:db:02:cc:96:8a:
                    45:49:ff:ab:2b:cb:89:50:51:e4:a9:81:83:45:f0:
                    63:6c:bf:67:14:bc:df:a5:77:56:27:14:e0:f1:bc:
                    af:b0:42:82:bc:05:e3:42:cd:32:6b:03:fd:f7:6f:
                    e7:b4:1f:82:0d:30:8a:e9:9a:fd:b8:fc:ba:e7:09:
                    97:46:55:a0:1a:c9:df:05:93:dc:10:62:7d:5d:ee:
                    cf:e8:ed:a4:91:fc:7b:d2:05:07:11:59:88:a4:c6:
                    2e:6a:49:bc:1f:90:d1:f0:a9:a3:0a:bd:63:55:f2:
                    0e:50:a8:bf:25:b5:6d:a6:cf:f4:96:2a:b7:47:c4:
                    51:94:e0:27:65:eb:99:42:54:03:42:46:9f:74:9b:
                    98:36:b2:7e:36:ec:f2:ba:df:ff:cf:04:59:83:2f:
                    cb:b9:67:de:f7:9f:52:76:6c:b8:9b:9e:4d:81:9e:
                    7e:34:7e:35:55:3a:44:64:90:a4:34:a3:56:d5:83:
                    b3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5D:5C:24:BC:E6:1D:73:F7:F0:0A:B8:23:18:8F:69:D0:7D:47:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/066b55c3-7fca-3fa3-8baf-ce4b7c9d788a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d414:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:fc:64:73:59:48:8d:5b:b0:a5:ee:89:ae:4c:2c:75:c9:61:
         6a:1e:c9:62:5a:13:36:f4:d7:4c:48:87:08:35:aa:95:62:b6:
         a6:3a:4f:97:7d:83:8f:19:76:11:90:04:18:cb:42:42:de:ee:
         8b:cd:f4:36:de:7c:34:e7:ee:4d:e4:e4:2a:2e:95:29:14:c3:
         7d:89:30:46:61:9e:2d:34:0d:71:9d:6e:a2:7d:fa:99:5b:01:
         53:ea:68:22:e0:8a:8d:26:95:09:0e:9b:ad:70:ea:7d:21:30:
         88:e6:b7:53:47:ce:87:b0:81:35:cb:ab:ca:ad:c8:d2:f8:12:
         d8:d6:38:0c:15:c8:f8:ac:85:78:62:12:89:dc:a3:a9:c4:d4:
         dc:6b:10:35:39:c9:a8:8e:5b:9b:c4:4c:1a:b3:74:a2:7d:8a:
         22:84:17:af:de:a4:2c:1f:19:16:0b:10:2c:0b:10:6c:3e:e2:
         25:1a:10:62:bb:e6:6c:39:1f:65:13:63:cd:66:78:bf:8f:0d:
         14:4b:0d:19:b4:fd:5f:86:d8:5f:24:39:cb:12:5e:8b:51:53:
         5b:d9:4f:72:65:af:08:13:d1:66:21:51:28:4d:dd:3f:1c:60:
         29:e5:7d:0a:76:72:ba:bc:a0:ef:4f:04:6b:44:88:0c:83:a6:
         0c:f3:df:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:36:36 2026 by rpki-client